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144 


("709"/$.ccls. or "380"/$.ccls. or 
M 7137$.ccls. or n 726"/$.ccls.) and 
(((unix or linux or window$ or "os" or 
"operating system" or Solaris or "os9") 
same (event or exception or hook? or 
stall$ or intercept? or interdtct$ or 
captur$)) and (malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" or 
buffer$ or stack$ or application?)) and 
dispatch$ and @ad< "20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/01 14:25 


L2 


388 


(((unix or linux or window$ or "os" or 
"operating system" or Solaris or "os9") 
same (event or exception or hook? or 
stall$ or intercept? or interdict$ or 
captur$)) and (malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" or 
buffer$ or stack$ or application?)) and 
dispatch$ and @ad< "20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/01 14:30 


L3 


141 


(((unix or linux or window$ or "os" or 
"operating system" or Solaris or "os9") 
same (event or exception or hook? or 
stall$ or intercept? or interdict$ or 
captur$)) and (malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" or 
buffer$ or stack$ or application?)) and 
dispatch$ and handler? and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/01 14:30 


S5 


0 


("709"/$.ccls. or "380"/$.ccls. or 

"713"/$.ccls. or "726"/$.ccls.) and 

• i i in ii i ■ it \ ■ 
(( windows hooks or os hooks ) and 

(malware or virus or viruses or trojan? 

or worm? or commandeer$ or attack$ 

or compromis$ or corrupt$ or 

countermeasur$ or overfllow$) with 

(buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


OFF 


2007/02/27 15:54 



3/1/07 4:42:22 PM 
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1 


("709"/$.ccls. or "380 , 7$.ccls. or 
M 713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and (malware 
or virus or viruses or trojan? or worm? 
or commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:30 


S8 


1 


( n 7097$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or n 7267$.ccls.) and 
(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and (malware 
or virus or viruses or trojan? or worm? 
or commandeer$ or attack$ or 
compromis$ or corrupts or 
countermeasur$ or overfllow$) with 
(call or "api" or buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


OFF 


2007/02/27 16:33 


S9 


6 


(((unix or linux or window$ or "os")" 
adj2 (hook? or stall$)) and (malware 
or virus or viruses or trojan? or worm? 
or commandeer$ or attack$ or 
com prom is$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(call or "api" or buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:32 


S10 


20 


("7097$.ccls. or."3807$.cds. or 
"7137$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window$ or "os" or 
"operating system") adj2 (hook? or 
stall$ or intercept? or interdict$ or 
captur$)) and (malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(call or "api" or buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:50 



3/1/07 4:42:22 PM 
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